Data Processing Addendum

Version 2026-08-26. This addendum is between the restaurant customer as controller and the Banak provider identified in the accepted offer as processor when Banak processes personal data on the customer’s behalf.

Banak processes data only on documented instructions, applies appropriate security measures, limits access, assists with data-subject and security obligations, and requires equivalent protections from subprocessors. Data may include guest requests, orders, feedback, staff and account data, device and security records, and transaction identifiers.

Subprocessors include Vercel, Supabase, Stripe and Resend, plus Google/Gemini or Alibaba Cloud Model Studio/Qwen only for enabled AI features. Banak gives at least 15 days’ notice of intended additions or replacements and permits a reasonable objection. International transfers use a valid legal mechanism and appropriate safeguards.

At the end of service, data is deleted, returned, anonymized, or retained only where required by law. Questions and requests may be sent to info@banak.app. Related: Privacy Policy and Terms of Service.